92% of reported vulnerabilities are in apps, not networks. National Institute of Standards & Technology